Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.mft
File: ufQO9_E-yaFW77DbOWCQvHXanUM.mft (raw, json)
Hash identifier: ngwKqfPZW2FPCD6K2kePCgwX+eLVGNvIsa2P9CyafjQ=
Subject key identifier: 52:D2:AE:C2:EE:A5:09:7A:BD:7F:EB:09:4A:3A:46:18:BA:DB:11:98
Authority key identifier: B9:F4:0E:F7:F1:3E:C9:A1:56:EF:B0:DB:39:60:90:BC:75:DA:9D:43
Certificate issuer: /CN=b9f40ef7f13ec9a156efb0db396090bc75da9d43
Certificate serial: 01A138C975C76AE8AFB7E0EB923CAA9ABA39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ufQO9_E-yaFW77DbOWCQvHXanUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.mft
Manifest number: 1AA2
Signing time: Wed 14 Oct 2026 05:01:29 +0000
Manifest this update: Wed 14 Oct 2026 05:01:29 +0000
Manifest next update: Thu 15 Oct 2026 05:01:29 +0000
Files and hashes: 1: bYWnNBJ88LbQXbWSQLO05IsIsMk.roa (hash: 8zUO33POztpiVvtW7T3x8U4nLE2YNCP2J0oxQWs2DYg=)
2: ufQO9_E-yaFW77DbOWCQvHXanUM.crl (hash: DGHv70UMVjdJY7OItu7NWnXDsD+qgpUOFhrgL3px+jY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ufQO9_E-yaFW77DbOWCQvHXanUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:38:c9:75:c7:6a:e8:af:b7:e0:eb:92:3c:aa:9a:ba:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9f40ef7f13ec9a156efb0db396090bc75da9d43
Validity
Not Before: Oct 14 05:01:29 2026 GMT
Not After : Oct 15 05:01:29 2026 GMT
Subject: CN=52d2aec2eea5097abd7feb094a3a4618badb1198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:12:c4:f5:03:7d:48:5b:16:3d:25:7a:08:67:
e2:90:68:af:c0:98:31:f2:15:7b:da:b7:00:56:17:
df:1b:61:57:fd:5c:55:39:90:9f:36:29:52:d5:b1:
6e:01:b8:07:4b:d8:e3:e9:b6:8b:2a:46:07:98:ef:
26:15:93:e8:92:f6:d1:e0:01:5a:03:80:fc:b5:f1:
94:ba:eb:e0:80:12:d9:ce:54:f6:0c:3b:1e:00:4e:
51:d3:d4:59:74:6a:c5:b7:7b:9d:0b:84:0d:fa:74:
0a:8f:dc:ab:99:a3:44:06:1c:c8:95:0b:3c:a6:ae:
41:2a:8c:4d:db:56:0c:dc:a9:8c:ec:5e:0e:ac:ae:
22:5b:23:8c:b5:53:84:94:fc:3d:a2:5d:8c:aa:f1:
fe:96:83:0d:c1:c4:a4:b1:98:ec:99:84:86:c3:5d:
30:0d:0d:57:b7:2f:b5:84:73:1d:4b:0a:37:d7:1b:
f0:99:e8:49:00:e8:b9:15:c5:96:2e:47:e9:fa:a9:
11:c0:36:91:52:d3:62:30:f6:5b:3b:de:56:5f:8a:
61:8e:6e:62:66:57:16:af:6a:1a:94:66:72:b1:e9:
1f:82:57:29:5b:54:e7:88:19:10:67:82:99:47:4a:
58:27:48:96:9b:71:fe:d3:08:70:ba:bf:a5:3f:bd:
77:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:D2:AE:C2:EE:A5:09:7A:BD:7F:EB:09:4A:3A:46:18:BA:DB:11:98
X509v3 Authority Key Identifier:
keyid:B9:F4:0E:F7:F1:3E:C9:A1:56:EF:B0:DB:39:60:90:BC:75:DA:9D:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ufQO9_E-yaFW77DbOWCQvHXanUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:22:dc:b1:55:23:1e:25:45:17:2a:10:60:d8:b4:45:0e:15:
a7:85:19:a3:a0:83:05:33:23:31:a3:b4:cb:cd:1b:ec:ae:8b:
8e:c4:9f:1c:4c:b2:56:99:a4:8d:e2:29:b2:71:98:0d:3c:df:
8a:b4:3f:50:28:d0:cd:e5:44:88:9f:28:cc:ab:24:e4:8d:bf:
db:e6:f5:d2:fc:aa:71:d0:57:5f:50:fa:56:75:4c:45:9b:f2:
37:4c:be:bc:53:78:48:f6:91:5c:31:22:40:84:41:34:27:bd:
69:bc:9e:86:6e:c0:0d:42:41:09:4f:f7:13:46:9d:86:00:bc:
ba:ab:c4:36:1a:16:fd:1d:05:99:e2:0e:96:ad:65:82:37:4f:
6a:b9:74:03:32:9a:25:f7:06:56:97:36:5a:c5:b0:67:87:3c:
61:50:55:82:ef:75:b3:67:e4:94:f0:47:25:7e:f2:c5:89:c5:
33:0c:f0:ef:e2:a8:c4:13:63:0c:a1:a8:87:15:d1:53:a0:cc:
b2:16:d8:22:6c:e8:ea:80:34:eb:e5:52:d6:3f:db:b6:0a:bd:
f4:69:d3:f6:64:90:0a:02:a5:f3:ae:90:50:0f:37:ff:e8:63:
b7:68:71:1a:db:70:78:c3:84:de:14:d5:14:5d:cb:82:99:c5:
1b:d3:58:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 15:18:17 2026 by rpki-client